EUVD-2026-79462

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerabilit...

CVE-2026-83135

A vulnerability in the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with required user interaction, resulting in high impact to confidentiality...

CVE-2026-83134

CVE-2026-83134 affects the Shopping Cart component of Oracle iStore (part of Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to...

CVE-2026-83131

A vulnerability in the File download component of Oracle Web Applications Desktop Integrator (within Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this with low complexity and no user interaction, r...

EUVD-2026-79460

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2026-83132

CVE-2026-83132 affects the Oracle iStore component (Shopping Cart) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve high confidentiality and integrity impact , enabling unauthorized ...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...

CVE-2026-83130

CVE-2026-83130 affects the Oracle Site Hub component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to compromise the product. Su...

EUVD-2026-79458

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful...

EUVD-2026-79457

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

EUVD-2026-79455

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

EUVD-2026-79454

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

CVE-2026-83126

This vulnerability affects Oracle Sales Online , a component of Oracle E-Business Suite (sub-component: Internal Operations ), in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require hu...

CVE-2026-83127

CVE-2026-83127 affects the Oracle Sales Offline product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , with no user interaction required. Due to...

EUVD-2026-79453

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager...

CVE-2026-83125

Oracle Report Manager (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the component, resulting in a takeover of Oracle Report ...

EUVD-2026-79451

Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager...

CVE-2026-83124

Oracle Sales Online (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, potentially resulting in a full takeover with hig...

CVE-2026-83122

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations component), is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTPS can exploit this flaw to achie...

CVE-2026-83123

Oracle Report Manager , a component of Oracle E-Business Suite (specifically the Internal Operations module), is affected in supported versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTPS , requiring no user interacti...